This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Sentry’s users trust us to develop, ship, and operate a secure open-source product and a secure SaaS offering, so they can focus on their own applications worry-free. We’re looking for an experienced Head of Security to build and scale Sentry’s security program—starting with early adoption (bug bounty, penetration testing, red teaming) and growing into a high-impact organization that protects both our multi-tenant SaaS and self-hosted products. This role is not for the faint of heart. You will adopt, improve, and expand our current protocols, breaking down barriers to create a secure environment for all users. Because Sentry will always provide an open-source option, success in this role requires creative, outside-the-box thinking to protect diverse deployment models.
Job Responsibility:
Ensure security for our SaaS platform—establish and operate the controls, guardrails, and monitoring required for a modern, high-scale, multi-tenant cloud service
Partner deeply with IT & Compliance on identity and access, endpoint/security baselines, vendor risk, policy, and audits
drive secure-by-default corporate foundations
Collaborate with executive leadership to fine-tune and evolve Sentry’s security strategy, set multi-year roadmaps, and communicate risks, tradeoffs, and outcomes
Build application and product security programs with support from the CTO and IT/Compliance orgs, including managing external parties for penetration tests and bug bounty programs
Prioritize automation and tooling over manual process
measure outcomes and continuously reduce risk and toil
Partner with Recruiting to build a world-class security team across AppSec, ProdSec, and GRC capabilities
Influence product roadmaps and customer-facing security features (e.g., MFA, session audit tooling, data controls)
Explore future security-adjacent product opportunities where Sentry can add value to developers and security teams
Define security objectives and key results (OKRs) for SaaS security posture, corporate security, and compliance outcomes
Collaborate with leaders in Engineering, Product, IT, and Compliance to align investments, policies, and incident response
Communicate security posture to leadership and contribute to board-level updates as needed
Requirements:
Deep understanding of modern security domains with expertise in at least two of: application/product security, infrastructure security, corporate/IT security
10+ years relevant experience, including 5+ years in security-focused roles and prior management experience
Strong technical background (CS degree or equivalent software engineering experience)
Proven experience building and managing security programs (bug bounty, pen testing, red teaming, secure SDLC, training)